[m4lvin]

I think PureOS includes GUFW by default. Does that count or do you mean something else by application firewall?

[I_am_tiberius]

I mean something else. An application firewall is something like opensnitch where you can block processes from communicating with specific external domains/ips.